Ermal
108cfddf3e
Ticket #1023 . Correct the widget code bringing it full speed with latest carp code.
2010-11-23 12:47:27 +00:00
Ermal
83ae810386
Try 3 times to resolve the host to ip before giving up. Leave a proper log if we fail to resolve. Ticket #943 .
2010-11-23 11:33:17 +00:00
Ermal
51d0f81698
Use full path to command binaries.
2010-11-23 11:32:22 +00:00
Erik Fonnesbeck
a2b6c52f72
Add option to control automatic creation of NAT rules which assist forwarding rules that send traffic out to the same subnet it originated from.
2010-11-22 11:38:59 -07:00
Erik Fonnesbeck
bddcbff274
When adding/editing a gateway, check IP alias subnets, too. Fixes #1015
2010-11-22 09:23:03 -07:00
Erik Fonnesbeck
d48dbceb95
Add other interfaces to local network selection and show proper names. Fixes #965
2010-11-22 08:53:15 -07:00
Erik Fonnesbeck
e63d59c0c2
Do not save settings related to ports when protocol does not use ports. Ticket #953
2010-11-22 07:32:48 -07:00
Erik Fonnesbeck
ae46e8b89d
Do not save fields from translation section when "Do not NAT" is checked. Ticket #952
2010-11-22 06:39:03 -07:00
Erik Fonnesbeck
4389352c75
In filter_generate_reflection_nat, generate a rule with the actual subnet instead of using the interface:network shortcut. Ticket #737
2010-11-22 05:27:13 -07:00
Erik Fonnesbeck
1452fa5788
Use correct names for integer and boolean types in DHCP options and fix typo in hexadecimal validation for strings. Fixes #962
2010-11-22 01:33:52 -07:00
Scott Ullrich
b3a4ff7ca5
Add newlines
2010-11-21 17:40:14 -05:00
Scott Ullrich
279f4da868
nuke ;
2010-11-21 16:26:35 -05:00
Scott Ullrich
558dda01da
Remove hw.bce.tso_enable item it is loader.conf only per jimp
2010-11-21 16:22:56 -05:00
Scott Ullrich
f41b7bdf17
Remove bce item it is loader.conf only per jimp
2010-11-21 16:21:46 -05:00
Scott Ullrich
fb182cb2ca
Define hw.bce.tso_enable
2010-11-21 16:20:20 -05:00
Erik Fonnesbeck
ed32aef778
Don't consider the HTTP referrer check as passing if it was skipped. Ticket #1027
2010-11-21 10:36:10 -07:00
Erik Fonnesbeck
0f806ecab4
Upon restoring a config, replacing whole sections, or editing config.xml in edit.php, prevent possible accidental lockout from DNS rebind and HTTP referrer checks by disabling them until reboot or the next time they pass, whichever comes sooner. Ticket #1027
2010-11-21 10:23:34 -07:00
Scott Ullrich
2b8bdfe47c
Add missing </item>
2010-11-20 14:42:27 -05:00
Scott Ullrich
243521961f
oops, typo
2010-11-20 14:40:48 -05:00
Scott Ullrich
feae85bc7e
Increase vfs.read_max to 32. See http://ivoras.sharanet.org/blog/tree/2010-11-19.ufs-read-ahead.html .. This can help dramatically if using Squid or any other packae that does a lot of hard disk reads.
2010-11-20 14:40:15 -05:00
jim-p
c049daefa8
Disable this test, it was causing some package file downloads to be skipped for me, and nothing else seems to set/use this variable anywhere.
2010-11-20 00:19:16 -05:00
Ermal
37c8e07d0c
Fix reading the ip from the right file for dyndns.
2010-11-19 18:24:58 +00:00
jim-p
e39243843f
Reorder some code and combine the nobind test with the lport code to ensure only the needed options are used in any given combination.
2010-11-19 10:44:54 -05:00
jim-p
5708241f95
When the local port is left blank on an OpenVPN client, use 'lport 0' to direct the client to use a random source port. Fixes #1025
2010-11-19 10:31:56 -05:00
Ermal
ad88ff3f95
Cleanup some code and properly handle failure of pkg_fetch_recursive.
2010-11-19 15:34:13 +00:00
Ermal
d08b0064d7
Clarify message.
2010-11-19 15:21:58 +00:00
Ermal
0cdf4e8748
Use correct extension of tgz rather than tgz for automatically discovered dependencies.
2010-11-19 15:17:50 +00:00
Ermal
c132bdb0f5
Honor the config parsed var if set.
2010-11-19 00:12:12 +00:00
Ermal
1883455aad
Hopefully now the reinclusion of config will not override vars.
2010-11-19 00:10:56 +00:00
Ermal
d8333a247a
Use full path when we might not have full environment setup.
2010-11-19 00:03:34 +00:00
Ermal
01a6e66579
globals.inc is better first.
2010-11-19 00:02:29 +00:00
Ermal
d9426abcea
More safety belts.
2010-11-19 00:00:56 +00:00
Ermal
d465a277cd
Fix fetching of package list.
2010-11-18 23:44:47 +00:00
Ermal
21bc451be7
Add myself to the copyright. Have modified enough the file.
2010-11-18 18:56:27 +00:00
Erik Fonnesbeck
4830e56a25
Some fixes for the upgrade code for captive portal users.
2010-11-18 10:31:33 -07:00
Erik Fonnesbeck
8784a3bbbf
Remove the old field even if empty in rename_field.
2010-11-18 09:13:42 -07:00
Erik Fonnesbeck
d7bf317824
Various fixes and improvements for the DNS rebind and HTTP referrer checks.
...
* Only compare with full host from referrer, since someone can put whatever they want at the left side of the period to the left of the domain name.
* Now can check for hostname as well, not just hostname.domain, in referrer check.
* Fix althostnames case for referrer check.
* Move the simpler, more commonly used cases above the ones involving foreach loops and skip the loops when a name match has already been found.
* Break out of foreach loops when a match has already been found.
* Do case-insensitive matching of hosts and domains.
* Remove useless checks of non-IP addresses against SERVER_ADDR.
2010-11-18 06:04:24 -07:00
Ermal
2addd5b2c3
Fix problem with syslog adding/removing for pacakges. Fix sync pacakges to call the right functions. Optimizations and code cleanup along the way.
2010-11-18 12:57:35 +00:00
Erik Fonnesbeck
0bee20108d
Save the host name and domain to a temporary location until the setup wizard is finished to prevent triggering the DNS rebind message. Fixes #1022 Also use this information to implement the redirect for changed host for ticket #455
2010-11-18 02:34:51 -07:00
Erik Fonnesbeck
b8d4d7cdc5
Handling this properly when the web gui is on an alternate port number.
2010-11-18 00:23:41 -07:00
Erik Fonnesbeck
6898927f4f
Make this check more general in case someone makes a wizard that changes an opt interface's IP address and wants to use the "Reload in progress" step. Ticket #455
2010-11-17 20:00:05 -07:00
jim-p
9c37f8cdc5
Properly reflect ports in the GUI view of the anti-lockout rule since Ermal's changes restricted it to only ssh/gui ports.
2010-11-17 19:37:24 -05:00
jim-p
916ee7453e
Show CRL download link only for imported certificates or CRLs with revoked certificates.
2010-11-17 19:16:45 -05:00
jim-p
304af9d8ef
Some CRL fixes.
2010-11-17 19:12:15 -05:00
Ermal
fa15f4ae52
Clear up some code.
2010-11-17 22:45:52 +00:00
Scott Ullrich
d98d6f7f42
Boost timeout for file downloads to 60 seconds
2010-11-17 17:42:10 -05:00
Ermal
eab543eda6
Ticket #1017 . Move the fwrite and fd_log initializing to a function. Name the function pkg_debug to properly show what is its purpose and also make it write something only when $debug is set.
2010-11-17 20:17:00 +00:00
Ermal
4c3d9312e8
Ticket #1017 . Put a @ before each fwrite to silence errors. Also setup the log file in the beginning rather than on each individual function.
2010-11-17 19:47:01 +00:00
Ermal
1ae5c631e8
Resolves #1018 . Provide a more unique host name for the file.
2010-11-17 19:36:32 +00:00
Erik Fonnesbeck
53d41b6885
The way this option is currently defined, the configuration variable is always set; for this case, isset is not the correct condition. Reported at http://forum.pfsense.org/index.php/topic,30153.0.html
2010-11-17 10:34:46 -07:00
